DOCKET NO.: MSFT-0092/ 127334.4 PATENT 
Application No.: 09/482,725 
Office Action Dated: April 14, 2005 

This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1-105. (Cancelled) 

106. (Withdrawn) A method for obtaining a digital license for rendering a 
piece of digital content comprising: 

contacting, by a license requestor, a license provider; 

sending, by the license requestor, a license request for the license to the 
contacted license provider; 

checking, by the license provider, the license request for validity; 

negotiating, by the license requestor and the license provider, terms and 
conditions for the requested license; 

generating, by the license provider, the requested license; and 

issuing, by the license provider, the generated license to the license requestor. 

107. (Withdrawn) The method of claim 106 wherein the digital content 
has corresponding license acquisition information including a location of a license provider 
for providing the license, the method further comprising determining, by the license 
requestor, the location of the license provider from the license acquisition information, 
wherein contacting the license provider comprises contacting the license provider at the 
determined location. 

108. (Withdrawn) The method of claim 106 wherein the license provider 
is a license server attached to a communications network, and wherein contacting the license 
server occurs over the communications network. 
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109. (Withdrawn) The method of claim 108 wherein sending the Ucense 
request and issuing the generated hcense occur over the estabhshed network connection. 

110. (Withdrawn) The method of claim 106 wherein the license request 
originates from a device including a security portion, and wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

111. (Withdrawn) The method of claim 110 wherein generating the 
requested license comprises generating the requested license based on the license request 
information. 

112. (Withdrawn) The method of claim 106 wherein the license request 
originates from a device including a security portion, wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including a version number of the security portion, and wherein checking the 
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license request for validity includes checking the version number of the security portion to 
determine whether such version number is current. 

113. (Withdrawn) The method of claim 112 further comprising refusing to 
issue the requested license until the security portion is upgraded to a version having a current 
version number. 

114. (Withdrawn) The method of claim 106 wherein the license request 
originates from a device including a security portion, wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including a certificate with a digital signature from a certifying authority 
certifying the security portion, and wherein checking the license request for validity includes 
checking the certificate with the digital signature from the certifying authority to determine 
whether such digital signature has been modified. 

115. (Withdrawn) The method of claim 1 06 wherein sending the license 
request comprises sending license request information to the license provider, the license 
request information including an identification of the license requestor, and wherein checking 
the license request for validity includes checking the identified license requestor against a list 
of license requestors to determine whether such license requestor is license-able. 

116. (Withdrawn) The method of claim 106 wherein the license request 
originates from a device, wherein sending the license request comprises sending license 
request information to the license provider, the license request information including an 
identification of the device, and wherein checking the license request for validity includes 
checking the identified device against a list of devices to determine whether such device is 
license-able. 
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117. (Withdrawn) The method of claim 106 wherein sending the license 
request comprises sending license request information to the license provider, the license 
request information including a content ID that identifies the digital content, the method 
further comprising locating, by the license provider, license provider information 
corresponding to the digital content based on the content ID, the license provider information 
including a decryption key (KD) for decrypting the digital content, license data regarding 
types of licenses available for the digital content, and terms and conditions for each type of 
license 

118. (Withdrawn) The method of claim 117 further comprising 
transmitting, from the license provider to the license requestor, information on the types of 
licenses available for the digital content. 

119. (Withdrawn) The method of claim 117 wherein generating the 
requested license comprises generating a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

120. (Withdrawn) The method of claim 119 wherein the license request 
originates from a device having a public key, and wherein generating the requested license 
comprises generating a license further including the decryption key (KD) for decrypting the 
digital content, such decryption key (KD) being encrypted with the public key of the device. 

121. (Withdrawn) The method of claim 119 wherein generating the 
requested license comprises generating a license further including a digital signature from the 
license provider based on at least a portion of the generated license, the digital signature 
being encrypted with a license provider private key. 
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122. (Withdrawn) The method of claim 119 wherein generating the 
requested license comprises generating a license further including a certificate indicating that 
the license provider has the authority to issue the generated license. 

123. (Withdrawn) The method of claim 106 wherein sending the license 
request comprises sending license request information to the license provider, the license 
request information including a key ED that identifies a decryption key (KD) for decrypting 
the digital content, the method further comprising locating, by the license provider, the 
decryption key (KD) for decrypting the digital content based on the key ID. 

124. (Withdrawn) The method of claim 123 wherein the license request 
originates from a device having a public key, and wherein generating the requested license 
comprises generating a license including the decryption key (KD) for decrypting the digital 
content, such decryption key (KD) being encrypted with the public key of the device. 

125. (Withdrawn) The method of claim 1 06 wherein negotiating the terms 
and conditions includes providing, by the license requestor to the license provider, further 
information as defined by the license provider. 

126. (Withdrawn) The method of claim 106 wherein negotiating the terms 
and conditions includes determining a payment instrament for paying for the requested 
license. 

127. (Withdrawn) The method of claim 106 wherein negotiating the terms 
and conditions includes determining a payment schedule for paying for the requested license. 

128. (Withdrawn) The method of claim 106 wherein generating the 
requested license comprises generating the requested license based on the license request. 
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129. (Withdrawn) The method of claim 106 further comprising 
maintaining, by the license provider, a record of the issued license. 

130. (Withdrawn) The method of claim 129 further comprising providing, 
by the Ucense provider to the license requestor, a re-issue of the issued hcense based upon the 
record of the issued Ucense and upon request by the license requestor, wherein the re-issue 
can replace the issued hcense in the case where the issued license is lost. 

131. (Withdrawn) The method of claim 1 06 further comprising placing, by 
the license requestor, the issued license in a license storage location. 

132. (Withdrawn) The method of claim 106 wherein issuing the generated 
license comprises issuing the generated license in a form separate from the digital content. 

133. (Withdrawn) The digital license as obtained by the method of claim 

106. 

134. (Withdrawn) The license of claim 133 for rendering a piece of digital 
content on a device having a public key and a private key, the digital content having a content 
ID, being encrypted, and being decryptable with a decryption key (KD), the digital license 
comprising: 

the content ID of the digital content; 

a license rights description specifying terms and conditions that must be 
satisfied before the digital content may be rendered; and 

the decryption key (KD) for decrypting the digital content, the decryption key 
being encrypted with the public key of the device (PU(KD)), wherein the device can apply 
the private key thereof to (PU(KD)) to obtain the decryption key (KD). 
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135. (Withdrawn) The Ucense of claim 134 wherein the Hcense rights 
description is encrypted with the decryption key (KD). 

136. (Withdrawn) The Ucense of claim 134 further comprising a digital 
signature for vaHdating the license. 

137. (Withdrawn) The license of claim 136 wherein the license is provided 
by a license server having a private key and a public key, and wherein the digital signature is 
encrypted with the private key of the license server. 

138. (Withdrawn) The license of claim 136 wherein the digital signature is 
based at least in part on the license rights description, wherein alteration of the license rights 
description prevents the digital signature from validating the license. 

139. (Withdrawn) The license of claim 136 wherein the digital signature is 
based at least in part on (PU(KD)), wherein alteration of (PU(KD)) prevents the digital 
signature from validating the license. 

140. (Withdrawn) The license of claim 134 wherein the license rights 
description is written in a predetermined license language, the digital license further 
comprising a license language tag specifying the license language. 

141 . (Withdrawn) The license of claim 134 wherein the license is provided 
by a hcense server and the digital content is provided by a content server, the license further 
comprising a certificate from the content server indicating that the license server has 
authority from the content server to provide the license. 

142. (Withdrawn) The license of claim 141 wherein the license server has 
a public key and a private key, and wherein the certificate includes the public key of the 
license server. 
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143. (Withdrawn) The license of claim 142 wherein the content server has 
a pub he key and a private key, wherein the certificate is signed with the private key of the 
content server, and wherein the device obtains the pubhc key of the content server to decrypt 
the encrypted signature. 

144. (Withdrawn) The hcense of claim 134 wherein the hcense is provided 
by a license server authorized by a root source to provide the license, the license further 
comprising a certificate from the root source indicating that the license server has authority 
from the root source to provide the license. 

145. (Withdrawn) The license of claim 144 wherein the license server has 
a public key and a private key, and wherein the certificate includes the public key of the 
license server. 

146. (Withdrawn) The license of claim 145 wherein the root source has a 
pubhc key and a private key, wherein the certificate is signed with the private key of the root 
source, and wherein the device obtains the pubhc key of the root source to decrypt the 
encrypted signature. 

147. (Withdrawn) The license of claim 134 wherein the license is provided 
by a license server authorized by an intermediary source to provide the license, the 
intermediary source in turn being authorized by a root source to authorize the license server, 
the license further comprising a first certificate from the root source indicating that the 
intermediary source has authority from the root source to authorize the license server, and a 
second certificate from the intermediary source indicating that the license server has authority 
from the intermediary source to provide the license. 
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148. (Withdrawn) The license of claim 147 wherein the license server has 
a public key and a private key, wherein the intermediary source has a public key and a private 
key, wherein the first certificate includes the public key of the intermediary source, and 
wherein the second certificate includes the public key of the license server. 

149. (Withdrawn) The license of claim 148 wherein the root source has a 
public key and a private key, wherein the first certificate is signed with the private key of the 
root source, wherein the second certificate is signed with the private key of the intermediary 
source, and wherein the device obtains the public key of the root source to decrypt the 
encrypted signature of the first certificate, and wherein the device obtains the public key of 
the intermediary source from the first certificate to decrypt the encrypted signature of the 
second certificate. 

1 50. (Withdrawn) A method for a license requestor to obtain a digital 
license for rendering a piece of digital content comprising: 

contacting a license provider; 

sending a license request for the license to the contacted license provider, the 
license provider thereafter checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 
provider, the license provider thereafter generating the requested license; and 

receiving the generated license as issued by the license provider. 

151. (Withdrawn) The method of claim 150 wherein the digital content 
has corresponding license acquisition information including a location of a license provider 
for providing the license, the method further comprising determining the location of the 



Page 10 of 45 



DOCKET NO.: MSFT-0092/127334.4 PATENT 
Application No.: 09/482,725 
Office Action Dated: April 14, 2005 

license provider from the license acquisition information, wherein contacting the license 
provider comprises contacting the license provider at the determined location. 

152. (Withdrawn) The method of claim 150 wherein the license provider 
is a license server attached to a communications network, and wherein contacting the license 
server occurs over the communications network. 

153. (Withdrawn) The method of claim 152 wherein sending the license 
request and receiving the generated license occur over the established network connection. 

154. (Withdrawn) The method of claim 1 50 wherein the license request 
originates from a device including a security portion, and wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

155. (Withdrawn) The method of claim 1 50 wherein the license request 
originates from a device including a security portion, wherein sending the license request 
comprises sending license request information to the license provider, the license request 
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information including a version number of the security portion, the license provider checking 
the version number of the security portion to determine whether such version number is 
current. 

156. (Withdrawn) The method of claim 150 wherein the license request 
originates from a device including a security portion, wherein sending the license request 
comprises sending license request information to the license provider, the license request 
information including a certificate with a digital signature from a certifying authority 
certifying the security portion, license provider checking the certificate with the digital 
signature from the certifying authority to determine whether such digital signature has been 
modified. 

157. (Withdra\vn) The method of claim 150 wherein sending the license 
request comprises sending license request information to the license provider, the license 
request information including an identification of the license requestor, the license provider 
checking the identified license requestor against a list of license requestors to determine 
whether such license requestor is license-able. 

158. (Withdrawn) The method of claim 150 wherein the license request 
originates from a device, wherein sending the license request comprises sending license 
request information to the license provider, the license request information including an 
identification of the device, the license provider checking the identified device against a list 
of devices to determine whether such device is license- able. 

159. (Withdrawn) The method of claim 150 wherein sending the license 
request comprises sending license request information to the license provider, the license 
request information including a content ID that identifies the digital content, the license 
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provider locating license provider information corresponding to the digital content based on 
the content ID. 

160. (Withdrawn) The method of claim 159 wherein the license provider 
information includes a decryption key (KD) for decrypting the digital content, license data 
regarding types of licenses available for the digital content, and terms and conditions for each 
type of license, the method further comprising receiving from the license provider 
information on the types of licenses available for the digital content. 

161. (Withdrawn) The method of claim 159 wherein receiving the 
requested license comprises receiving a license including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

162. (Withdrawn) The method of claim 161 wherein the license request 
originates from a device having a public key, and wherein receiving the requested license 
comprises receiving a license further including the decryption key (KD) for decrypting the 
digital content, such decryption key (KD) being encrypted with the public key of the device. 

163. (Withdrawn) The method of claim 161 wherein receiving the 
requested license comprises receiving a license further including a digital signature from the 
license provider based on at least a portion of the generated license, the digital signature 
being encrypted with a license provider private key. 

164. (Withdrawn) The method of claim 161 wherein receiving the 
requested license comprises receiving a license further including a certificate indicating that 
the license provider has the authority to issue the generated license. 
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165. (Withdrawn) The method of claim 150 wherein sending the Ucense 
request comprises sending Ucense request information to the Ucense provider, the license 
request information including a key ID that identifies a decryption key (KD) for decrypting 
the digital content, the Ucense provider locating the decryption key (KD) based on the key 
ID. 

166. (Withdrawn) The method of claim 165 wherein the Ucense request 
originates from a device having a public key, and wherein receiving the requested Ucense 
comprises receiving a license including the decryption key (KD) for decrypting the digital 
content, such decryption key (KD) being encrypted with the public key of the device. 

167. (Withdrawn) The method of claim 150 wherein negotiating the terms 
and conditions includes providing further information to the license provider as defined 
thereby. 

168. (Withdrawn) The method of claim 150 wherein negotiating the terms 
and conditions includes determining a payment instrument for paying for the requested 
license. 

169. (Withdrawn) The method of claim 150 wherein negotiating the terms 
and conditions includes determining a payment schedule for paying for the requested license. 

170. (Withdrawn) The method of claim 150 wherein the license provider 
maintains a record of the issued license, the method further comprising receiving from the 
license provider upon request a re-issue of the issued license based upon the record of the 
issued license, wherein the re-issue can replace the issued license in the case where the issued 
license is lost. 
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171. (Withdrawn) The method of claim 150 further comprising placing the 
issued license in a license storage location. 

1 72. (Withdrawn) The method of claim 150 wherein the receiving the 
license step comprises receiving the license in a form separate from the digital content. 

173. (Withdrawn) A method for a license provider to provide a digital 
license for rendering a piece of digital content comprising: 

receiving a request for the Hcense from a license requestor having a public 

key; 

checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 

requestor; 

generating the requested license including a decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the license requestor; and 

issuing the generated license to the license requestor. 

174. (Withdrawn) The method of claim 173 wherein the license provider 
is a license server attached to a communications network, and wherein receiving the license 
request occurs over the communications network. 

175. (Withdrawn) The method of claim 174 wherein issuing the generated 
license occur over the communications network. 

176. (Withdrawn) The method of claim 173 wherein the license request 
originates from a device including a security portion, and wherein receiving the license 
request comprises receiving license request information including: 
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an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature fi'om a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

177. (Withdrawn) The method of claim 176 wherein generating the 
requested license comprises generating the requested license based on the license request 
information. 

178. (Withdrawn) The method of claim 173 wherein the license request 
originates firom a device including a security portion, wherein receiving the license request 
comprises receiving license request information including a version number of the security 
portion, and wherein checking the license request for validity includes checking the version 
number of the security portion to determine whether such version number is current. 

179. (Withdrawn) The method of claim 178 further comprising refiasing to 
issue the requested license until the security portion is upgraded to a version having a current 
version number. 

180. (Withdrawn) The method of claim 173 wherein the license request 
originates fi-om a device including a security portion, wherein receiving the license request 
comprises receiving license request information including a certificate with a digital signature 
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from a certifying authority certifying the security portion, and wherein checking the hcense 
request for validity includes checking the certificate with the digital signature from the 
certifying authority to determine whether such digital signature has been modified. 

1 8 L (Withdrawn) The method of claim 1 73 wherein receiving the license 
request comprises receiving license request information including an identification of the 
license requestor, and wherein checking the license request for validity includes checking the 
identified license requestor against a list of license requestors to determine whether such 
license requestor is license-able, 

182. (Withdrawn) The method of claim 173 wherein the license request 
originates from a device, wherein receiving the license request comprises receiving license 
request information including an identification of the device, and wherein checking the 
license request for validity includes checking the identified device against a list of devices to 
determine whether such device is license-able. 

183. (Withdrawn) The method of claim 173 wherein receiving the license 
request comprises receiving license request information including a content ID that identifies 
the digital content, the method fiirther comprising locating license provider information 
corresponding to the digital content based on the content ID, the license provider information 
including a decryption key (KD) for decrypting the digital content, license data regarding 
types of licenses available for the digital content, and terms and conditions for each type of 
hcense. 

1 84. (Withdrawn) The method of claim 1 83 further comprising 
transmitting to the license requestor information on the types of licenses available for the 
digital content. 
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185. (Withdrawn) The method of claim 183 wherein generating the 
requested license comprises generating a hcense including: 

the content ID of the digital content; and 
the terms and conditions of the license. 

186. (Withdrawn) The method of claim 185 wherein the license request 
originates from a device having a public key, and wherein generating the requested license 
comprises generating a license further including the decryption key (KD) for decrypting the 
digital content, such decryption key (KD) being encrypted with the public key of the device. 

1 87. (Withdrawn) The method of claim 185 wherein generating the 
requested license comprises generating a license further including a digital signature from the 
license provider based on at least a portion of the generated license, the digital signature 
being encrypted with a license provider private key. 

188. (Withdrawn) The method of claim 185 wherein generating the 
requested license comprises generating a license further including a certificate indicating that 
the license provider has the authority to issue the generated license. 

1 89. (Withdrawn) The method of claim 1 73 wherein receiving the license 
request comprises receiving license request information including a key ID that identifies a 
decryption key (KD) for decrypting the digital content, the method further comprising 
locating the decryption key (KD) for decrypting the digital content based on the key ID. 

190. (Withdrawn) The method of claim 189 wherein the license request 
originates from a device having a public key, and wherein generating the requested license 
comprises generating a license including the decryption key (KD) for decrypting the digital 
content, such decryption key (KD) being encrypted with the public key of the device. 
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191. (Withdrawn) The method of claim 1 73 wherein negotiating the terms 
and conditions includes receiving further information as defined by the license provider. 

192. (Withdrawn) The method of claim 173 wherein negotiating the terms 
and conditions includes determining a payment instrument for paying for the requested 
license. 

193. (Withdrawn) The method of claim 173 wherein negotiating the terms 
and conditions includes determining a payment schedule for paying for the requested license. 

194. (Withdrawn) The method of claim 173 wherein generating the 
requested license comprises generating the requested license based on the license request. 

195. (Withdrawn) The method of claim 173 further comprising 
maintaining a record of the issued license. 

196. (Withdrawn) The method of claim 195 further comprising providing 
to the license requestor upon request a re-issue of the issued license based upon the record of 
the issued Ucense, wherein the re-issue can replace the issued license in the case where the 
issued license is lost. 

197. (Withdrawn) The method of claim 173 wherein the issuing the 
license step comprises issuing the license in a form separate from the digital content. 

198. (Withdrawn) A digital license for rendering a piece of digital content 
on a device having a public key and a private key, the digital content having a content ID, 
being encrypted, and being decryptable with a decryption key (KD), the digital Ucense 
comprising: 

the content ID of the digital content; 
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a license rights description specifying terms and conditions that must be 
satisfied before the digital content may be rendered; and 

the decryption key (KD) for decrypting the digital content, the decryption key 
being encrypted with the pubHc key of the device (PU(KD)), wherein the device can apply 
the private key thereof to (PU(KD)) to obtain the decryption key (KD). 

199. (Withdrawn) The license of claim 198 wherein the license rights 
description is encrypted with the decryption key (KD). 

200. (Withdrawn) The license of claim 198 further comprising a digital 
signature for validating the license. 

201 . (Withdrawn) The license of claim 200 wherein the license is provided 
by a license server having a private key and a public key, and wherein the digital signature is 
encrypted with the private key of the license server. 

202. (Withdrawn) The license of claim 200 wherein the digital signature is 
based at least in part on the license rights description, wherein alteration of the license rights 
description prevents the digital signature from validating the license. 

203. (Withdrawn) The license of claim 200 wherein the digital signature is 
based at least in part on (PU(KD)), wherein alteration of (PU(KD)) prevents the digital 
signature fi"om validating the license. 

204. (Withdrawn) The license of claim 198 wherein the license rights 
description is written in a predetermined license language, the digital license further 
comprising a license language tag specifying the license language. 

205. (Withdrawn) The license of claim 198 wherein the license is provided 
by a hcense server and the digital content is provided by a content server, the license further 
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comprising a certificate from the content server indicating that the Hcense server has 
authority from the content server to provide the license. 

206. (Withdraw^n) The license of claim 205 wherein the license server has 
a public key and a private key, and wherein the certificate includes the public key of the 
license server. 

207. (Withdrawn) The license of claim 206 wherein the content server has 
a public key and a private key, wherein the certificate is signed with the private key of the 
content server, and wherein the device obtains the public key of the content server to decrypt 
the encrypted signature. 

208. (Withdrawn) The license of claim 198 wherein the license is provided 
by a license server authorized by a root source to provide the license, the license fiirther 
comprising a certificate from the root source indicating that the license server has authority 
fi-om the root source to provide the license. 

209. (Withdrawn) The license of claim 208 wherein the license server has 
a public key and a private key, and wherein the certificate includes the public key of the 
license server. 

210. (Withdrawn) The license of claim 209 wherein the root source has a 
public key and a private key, wherein the certificate is signed with the private key of the root 
source, and wherein the device obtains the public key of the root source to decrypt the 
encrypted signature. 

211. (Withdrawn) The license of claim 198 wherein the license is provided 
by a license server authorized by an intermediary source to provide the license, the 
intermediary source in turn being authorized by a root source to authorize the license server. 
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the license further comprising a first certificate firom the root source indicating that the 
intermediary source has authority fi-om the root source to authorize the hcense server, and a 
second certificate firom the intermediary source indicating that the license server has authority 
fi:-om the intermediary source to provide the hcense. 

212. (Withdrawn) The hcense of claim 211 wherein the license server has 
a public key and a private key, wherein the intermediary source has a public key and a private 
key, wherein the first certificate includes the public key of the intermediary source, and 
wherein the second certificate includes the public key of the license server. 

213. (Withdrawn) The license of claim 212 wherein the root source has a 
public key and a private key, wherein the first certificate is signed with the private key of the 
root source, wherein the second certificate is signed with the private key of the intermediary 
source, and wherein the device obtains the public key of the root source to decrypt the 
encrypted signature of the first certificate, and wherein the device obtains the public key of 
the intermediary source from the first certificate to decrypt the encrypted signature of the 
second certificate. 

214. (Withdrawn) The license of claim 198 in a form separate from the 

digital content. 

215. (Withdrawn) A computer-readable medium having stored thereon a 
data structure corresponding to a digital license for rendering a piece of digital content on a 
device having a public key and a private key, the digital content having a content ID, being 
encrypted, and being decryptable with a decryption key (KD), the data structure comprising: 

a first data field containing the content ID of the digital content; 
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a second data field containing a license rights description specifying terms and 
conditions that must be satisfied before the digital content may be rendered; and 

a third data field containing the decryption key (KD) for decrypting the digital 
content, the decryption key being encrypted with the public key of the device (PU(KD)), 
wherein the device can apply the private key thereof to (PU(KD)) to obtain the decryption 
key (KD). 

216. (Withdrawn) The data structure of claim 215 wherein the license 
rights description is encrypted with the decryption key (KD). 

217. (Withdrawn) The data structure of claim 215 further comprising a 
fourth data field containing a digital signature for validating the license. 

218. (Withdrawn) The data structure of claim 217 wherein the data 
structure is provided by a license server having a private key and a public key, and wherein 
the digital signature is encrypted with the private key of the license server. 

219. (Withdrawn) The data structure of claim 217 wherein the digital 
signature is based at least in part on the license rights description, wherein alteration of the 
license rights description prevents the digital signature from validating the license. 

220. (Withdrawn) The data structure of claim 217 wherein the digital 
signature is based at least in part on (PU(KD)), wherein alteration of (PU(KD)) prevents the 
digital signature from validating the license. 

22 1 . (Withdrawn) The data structure of claim 215 wherein the license 
rights description is written in a predetermined license language, the digital license further 
comprising a fourth data field containing a license language tag specifying the license 
language. 
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222. (Withdrawn) The data structure of claim 215 wherein the data 
structure is provided by a Ucense server and the digital content is provided by a content 
server, the data structure further comprising a fourth data field containing a certificate from 
the content server indicating that the license server has authority from the content server to 
provide the data structure. 

223. (Withdrawn) The data structure of claim 222 wherein the Ucense 
server has a public key and a private key, and wherein the certificate includes the public key 
of the license server. 

224. (Withdrawn) The data structure of claim 223 wherein the content 
server has a public key and a private key, wherein the certificate is signed with the private 
key of the content server, and wherein the device obtains the public key of the content server 
to decrypt the encrypted signature. 

225 . (Withdrawn) The data structure of claim 215 wherein the data 
structure is provided by a license server authorized by a root source to provide the license, the 
license further comprising a fourth data field containing a certificate from the root source 
indicating that the license server has authority from the root source to provide the license. 

226. (Withdrawn) The data structure of claim 225 wherein the license 
server has a public key and a private key, and wherein the certificate includes the public key 
of the license server. 

227. (Withdrawn) The data structure of claim 226 wherein the root source 
has a public key and a private key, wherein the certificate is signed with the private key of the 
root source, and wherein the device obtains the public key of the root source to decrypt the 
encrypted signature. 
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228. (Withdrawn) The data structure of claim 215 wherein the data 
structure is provided by a license server authorized by an intermediary source to provide the 
license, the intermediary source in tum being authorized by a root source to authorize the 
license server, the license further comprising a fourth data field containing a first certificate 
from the root source indicating that the intermediary source has authority firom the root 
source to authorize the license server, and a fifth data field containing a second certificate 
from the intermediary source indicating that the license server has authority from the 
intermediary source to provide the license. 

229. (Withdrawn) The data structure of claim 228 wherein the license 
server has a public key and a private key, wherein the intermediary source has a public key 
and a private key, wherein the first certificate includes the public key of the intermediary 
source, and wherein the second certificate includes the public key of the license server. 

230. (Withdrawn) The data structure of claim 229 wherein the root source 
has a public key and a private key, wherein the first certificate is signed with the private key 
of the root source, wherein the second certificate is signed with the private key of the 
intermediary source, and wherein the device obtains the public key of the root source to 
decrypt the encrypted signature of the first certificate, and wherein the device obtains the 
public key of the intermediaiy source from the first certificate to decrypt the encrypted 
signature of the second certificate. 

23 1 . (Withdrawn) The data structure of claim 215 separate fi-om the digital 

content. 
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232. (Withdrawn) A computer-readable medium having computer- 
executable instructions for performing a method for a license requestor to obtain a digital 
license for rendering a piece of digital content comprising: 

contacting a license provider; 

sending a license request for the license to the contacted license provider, the 
license provider thereafter checking the license request for validity; 

negotiating terms and conditions for the requested license with the license 
provider, the license provider thereafter generating the requested license; and 

receiving the generated license as issued by the license provider. 

233. (Withdrawn) The computer-readable medium of claim 232 wherein 
the digital content has corresponding license acquisition information including a location of a 
license provider for providing the license, the method further comprising determining the 
location of the license provider from the license acquisition information, wherein contacting 
the license provider comprises contacting the license provider at the determined location. 

234. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license provider is a license server attached to a communications network, and wherein 
contacting the license server occurs over the communications network. 

235. (Withdrawn) The computer-readable medium of claim 234 wherein 
sending the license request and receiving the generated license occur over the established 
network connection. 

236. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license request originates from a device including a security portion, and wherein sending 
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the license request comprises sending license request information to the license provider, the 
license request information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 

a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

237. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a version number of the security portion, the license 
provider checking the version number of the security portion to determine whether such 
version number is current. 

238. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license request originates from a device including a security portion, wherein sending the 
license request comprises sending license request information to the license provider, the 
license request information including a certificate with a digital signature from a certifying 
authority certifying the security portion, license provider checking the certificate with the 
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digital signature from the certifying authority to determine whether such digital signature has 
been modified. 

239. (Withdrawn) The computer-readable medium of claim 232 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including an identification of the license requestor, 
the license provider checking the identified license requestor against a list of license 
requestors to determine whether such license requestor is license-able. 

240. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license request originates from a device, wherein sending the license request comprises 
sending license request information to the license provider, the license request information 
including an identification of the device, the license provider checking the identified device 
against a list of devices to determine whether such device is license-able. 

241 . (Withdrawn) The computer-readable medium of claim 232 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a content ED that identifies the digital 
content, the license provider locating license provider information corresponding to the 
digital content based on the content ID. 

242. (Withdrawn) The computer-readable medium of claim 241 wherein 
the license provider information includes a decryption key (KD) for decrypting the digital 
content, license data regarding types of licenses available for the digital content, and terms 
and conditions for each type of license, the method further comprising receiving from the 
license provider information on the types of licenses available for the digital content. 
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243. (Withdrawn) The computer-readable medium of claim 241 wherein 
receiving the requested license comprises receiving a license including: 

the content LD of the digital content; and 
the terms and conditions of the license. 

244. (Withdrawn) The computer-readable medium of claim 243 wherein 
the license request originates from a device having a public key, and wherein receiving the 
requested license comprises receiving a license further including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 

245. (Withdrawn) The computer-readable medium of claim 243 wherein 
receiving the requested license comprises receiving a license further including a digital 
signature from the license provider based on at least a portion of the generated license, the 
digital signature being encrypted with a license provider private key. 

246. (Withdrawn) The computer-readable medium of claim 243 wherein 
receiving the requested license comprises receiving a license further including a certificate 
indicating that the license provider has the authority to issue the generated license. 

247. (Withdrawn) The computer-readable medium of claim 232 wherein 
sending the license request comprises sending license request information to the license 
provider, the license request information including a key ED that identifies a decryption key 
(KD) for decrypting the digital content, the license provider locating the decryption key (KD) 
based on the key ID. 

248. (Withdrawn) The computer-readable medium of claim 247 wherein 
the license request originates from a device having a public key, and wherein receiving the 
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requested license comprises receiving a license including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 

249. (Withdrawn) The computer-readable medium of claim 232 wherein 
negotiating the terms and conditions includes providing further information to the license 
provider as defined thereby. 

250. (Withdrawn) The computer-readable medium of claim 232 wherein 
negotiating the terms and conditions includes determining a payment instrument for paying 
for the requested license. 

25 1 . (Withdrawn) The computer-readable medium of claim 232 wherein 
negotiating the terms and conditions includes determining a payment schedule for paying for 
the requested license. 

252. (Withdrawn) The computer-readable medium of claim 232 wherein 
the license provider maintains a record of the issued license, the method further comprising 
receiving from the license provider upon request a re-issue of the issued license based upon 
the record of the issued license, wherein the re-issue can replace the issued license in the case 
where the issued license is lost. 

253. (Withdrawn) The computer-readable medium of claim 232 further 
comprising placing the issued license in a license storage location. 

254. (Withdrawn) The computer-readable medium of claim 232 wherein 
the receiving the license step comprises receiving the license in a form separate from the 
digital content. 
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255. (Withdrawn) A computer-readable medium having computer- 
executable instructions for performing a method for a license provider to provide a digital 
license for rendering a piece of digital content comprising: 

receiving a request for the license from a license requestor; 
checking the license request for validity; 

negotiating terms and conditions for the requested license w^ith the license 

requestor; 

generating the requested license; and 

issuing the generated license to the license requestor. 

256. (Withdrav^n) The computer-readable medium of claim 255 wherein 
the license provider is a license server attached to a communications network, and wherein 
receiving the license request occurs over the communications network. 

257. (Withdrawn) The computer-readable medium of claim 256 wherein 
issuing the generated license occur over the communications network. 

258. (Withdrawn) The computer-readable medium of claim 255 wherein 
the license request originates from a device including a security portion, and wherein 
receiving the license request comprises receiving license request information including: 

an identification of the device; 

an identification of the license requestor; 

a public key of the device; 

a version number of the security portion; 

a certificate with a digital signature from a certifying authority certifying the 
security portion; 
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a content ID that identifies the digital content; and 

a key ID that identifies a decryption key (KD) for decrypting the digital 

content. 

259. (Withdrawn) The computer-readable medium of claim 258 wherein 
generating the requested license comprises generating the requested license based on the 
license request information. 

260. (Withdrawn) The computer-readable medium of claim 255 wherein 
the license request originates from a device including a security portion, wherein receiving 
the license request comprises receiving license request information including a version 
number of the security portion, and wherein checking the license request for validity includes 
checking the version number of the security portion to determine whether such version 
number is current. 

261. (Withdrawn) The computer-readable medium of claim 260 further 
comprising refusing to issue the requested license until the security portion is upgraded to a 
version having a current version number. 

262. (Withdrawn) The computer-readable medium of claim 255 wherein 
the license request originates from a device including a security portion, wherein receiving 
the license request comprises receiving license request information including a certificate 
with a digital signature from a certifying authority certifying the security portion, and 
wherein checking the license request for validity includes checking the certificate with the 
digital signature from the certifying authority to determine whether such digital signature has 
been modified. 
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263. (Withdrawn) The computer-readable medium of claim 255 wherein 
receiving the license request comprises receiving license request information including an 
identification of the license requestor, and wherein checking the license request for validity 
includes checking the identified license requestor against a list of license requestors to 
determine whether such license requestor is license-able. 

264. (Withdrawn) The computer-readable medium of claim 255 wherein 
the license request originates from a device, wherein receiving the license request comprises 
receiving license request information including an identification of the device, and wherein 
checking the license request for validity includes checking the identified device against a list 
of devices to determine whether such device is license-able. 

265. (Withdrawn) The computer-readable medium of claim 255 wherein 
receiving the license request comprises receiving license request information including a 
content ID that identifies the digital content, the method further comprising locating license 
provider information corresponding to the digital content based on the content ID, the license 
provider information including a decryption key (KD) for decrypting the digital content, 
license data regarding types of licenses available for the digital content, and terms and 
conditions for each type of license. 

266. (Withdrawn) The computer-readable medium of claim 265 fiirther 
comprising transmitting to the license requestor information on the types of licenses available 
for the digital content. 

267. (Withdrawn) The computer- readable medium of claim 265 wherein 
generating the requested license comprises generating a license including: 

the content ID of the digital content; and 
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the terms and conditions of the Ucense. 

268. (Withdrawn) The computer-readable medium of claim 267 wherein 
the license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license further including the decryption key (KD) 
for decrypting the digital content, such decryption key (KD) being encrypted with the public 
key of the device. 

269. (Withdrawn) The computer-readable medium of claim 267 wherein 
generating the requested license comprises generating a license further including a digital 
signature from the license provider based on at least a portion of the generated license, the 
digital signature being encrypted with a license provider private key. 

270. (Withdrawn) The computer-readable medium of claim 267 wherein 
generating the requested license comprises generating a license further including a certificate 
indicating that the license provider has the authority to issue the generated license. 

27 1 . (Withdrawn) The computer-readable medium of claim 255 wherein 
receiving the license request comprises receiving license request information including a key 
ID that identifies a decryption key (KD) for decrypting the digital content, the method ftirther 
comprising locating the decryption key (KD) for decrypting the digital content based on the 
key ID. 

272. (Withdrawn) The computer-readable medium of claim 271 wherein 
the license request originates from a device having a public key, and wherein generating the 
requested license comprises generating a license including the decryption key (KD) for 
decrypting the digital content, such decryption key (KD) being encrypted with the public key 
of the device. 
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273. (Withdrawn) The computer-readable medium of claim 255 wherein 
negotiating the terms and conditions includes receiving further information as defined by the 
Hcense provider. 

274. (Withdrawn) The computer-readable medium of claim 255 wherein 
negotiating the terms and conditions includes determining a payment instrument for paying 
for the requested license. 

275. (Withdrawn) The computer-readable medium of claim 255 wherein 
negotiating the terms and conditions includes determining a pajmient schedule for paying for 
the requested license. 

276. (Withdrawn) The computer-readable medium of claim 255 wherein 
generating the requested license comprises generating the requested license based on the 
license request. 

277. (Withdrawn) The computer-readable medium of claim 255 further 
comprising maintaining a record of the issued license. 

278. (Withdrawn) The computer-readable medium of claim 277 further 
comprising providing to the license requestor upon request a re-issue of the issued license 
based upon the record of the issued license, wherein the re-issue can replace the issued 
license in the case where the issued license is lost. 

279. (Withdrawn) The computer-readable medium of claim 255 wherein 
the issuing the license step comprises issuing the license in a form separate firom the digital 
content. 
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280. (Currently Amended) A method for a server to provide to a client 
computer a digital license of one or more rights to render digital content, the digital content 
encrypted with a decryption key, the method comprising: 

receiving, from the client computer, a license request, the license request 
containing a key identifier that identifies the decryption key and a client certificate associated 
with the client computer, the client certificate including a public key associated v^ith the 
client computer ; 

responsive to the request, generating a license response including a digital 
rights Hcense, the decryption key identified by the key identifier, and at least one server 
certificate to be used by the client computer to validate the license response; and 

transmitting the license response to the client computer^ 

wherein the generating comprises: 

applying the key identifier as an input to an algorithm by which the decryption 
key is produced; 

encrypting the decryption key with the public key to obtain an encrypted 
decryption key; and 

generating the license response including the encrypted decryption key, and at 
least one certificate to be used by the client computer to validate the license response . 

281. (Previously presented) The method of claim 280 wherein the 
license request includes a content identifier, and a list containing one or more requested 
rights, and wherein the generating further comprises: 

generating the digital rights license based on the one or more requested rights. 

282. (Canceled) 
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283. (Previously presented) The method of claim 280 wherein 
transmitting comprises: 

transmitting the license response to the client computer as part of an HTML 

page. 

284. (Previously presented) The method of claim 280 wherein 
generating comprises: 

at least partially encrypting one or more elements in the license response; and 
encoding the license response. 

285. (Currently Amended) The method of claim 280 wh e r e in th e lic e ns e 
r e qu e st includ o o a public key aoGociat e d with th e cli e nt comput e r and wherein the generating 
further comprises: 

e ncrypting th e d e cryption k e y with th e public k e y to obtain an e ncrypt e d 
d e cryption k e y; 

encrypting the digital rights license with the decryption key to obtain an 
encrypted digital rights license; and 

generating the license response including the encrypted digital rights license^ 
th e e ncrypted decryption k e y, and at l e ast on e c e rtificate to b e used by th e cli e nt comput e r to 
validat e th e lic e ns e r e spons e. 

286. (Previously presented) The method of claim 280 wherein the at 
least one server certificate comprises a first certificate for validating the server. 

287. (Previously presented) The method of claim 286 wherein the at 
least one server certificate further comprises a second certificate for validating a second 
server associated with the digital content. 
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288. (Previously presented) The method of claim 280 wherein the 
license request is contained in an HTTP request transmitted by the client computer to an 
address identified by the digital content. 

289. (Previously presented) The method of claim 280 wherein the 
license request includes a version number for a Digital Rights Management (DRM) system 
on the client computer. 

290. (Currently Amended) A method for a server to provide to a client 
computer a digital license of one or more rights to render digital content, the digital content 
encrypted with a decryption key, the method comprising: 

receiving, from the client computer, a license request, the license request 
containing a key identifier that identifies the decryption key and a client certificate associated 
with the client computer, the client certificate including a public kev associated with the 
client computer : and 

responsive to the request, transmitting a license response to the client 
computer, the license response including a digital rights license, the decryption key identified 
by the key identifier, and at least one server certificate to be used by the client computer to 
validate the license response^ 

wherein the transmitting further comprises transmitting the decryption key as 
an encrypted decryption key, the encrypted decryption kev being the decryption kev 
encrypted with the public key, the decryption key being produced by application of the key 
identifier as an input to an algorithm by which the decryption key is produced . 

291 . (Previously presented) The method of claim 290 wherein the 
license request includes a content identifier, and a list containing one or more requested 
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rights, and wherein the digital rights license grants rights based on the one or more requested 
rights. 

292. (Canceled) 

293 . (Previously presented) The method of claim 290 wherein 
transmitting comprises: 

transmitting the license response to the client computer as part of an HTML 

page. 

294. (Previously presented) The method of claim 290 wherein 
transmitting further comprises: 

transmitting the license response in an encoded and at least partially encrypted 

state. 

295. (Currently Amended) The method of claim 290 wh e r e in th e lic e ns e 
r e qu e st includ e s a public k e y associated with th e cli e nt comput e r and wherein the 
transmitting further comprises: 

transmitting th e d e cryption k e y as an e ncrypt e d d e cryption k e y, th e e ncrypt e d 
d e cryption k e y b e ing th e d e cryption key e ncrypt e d with th e public k e y; and 

transmitting the digital rights license as an encrypted digital rights license, the 
encrypted digital rights license being the digital rights license encrypted with the decryption 
key. 

296. (Previously presented) The method of claim 290 wherein the at 
least one server certificate comprises a first certificate for validating the server. 
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297. (Previously presented) The method of claim 296 wherein the at 
least one server certificate further comprises a second certificate for validating a second 
server associated with the digital content. 

298. (Previously presented) The method of claim 290 wherein the 
license request is contained in an HTTP request transmitted by the client computer to an 
address identified by the digital content. 

299. (Previously presented) The method of claim 290 wherein the license 

request includes a version number for a Digital Rights Management (DRM) system on the 
client computer. 
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